Most recent entries from all

3ADR011377 — AC500 V3 Multiple vulnerabilities

2026-10-03T17:49:01.301892+00:00

An update is available that resolves a publicly reported vulnerability in the product versions listed as affected in the advisory. An attacker who successfully exploited these vulnerabilities could call shell functions (CVE-2023-6357), crash the PLC (CVE-2024-5000), crash the web server of the PLC (CVE-2024-8175), grant read access to files (CVE-2024-12429) or enable command execution (CVE-2024-12430). The vulnerabilities CVE-2023-6357, CVE-2024-12429 and CVE-2024-12430 require successful authentication.

EUVD-2026-258517

2026-10-03T17:49:01.301948+00:00

EUVD-2026-258517

fkie_cve-2024-12429

2026-10-03T17:49:01.301965+00:00

An attacker who successfully exploited these vulnerabilities could grant read access to files. A vulnerability exists in the AC500 V3 version mentioned. A successfully authenticated attacker can use this vulnerability to read system wide files and configuration

All AC500 V3 products (PM5xxx) with firmware version earlier than 3.8.0 are affected by this vulnerability.

GHSA-h2jj-x3fh-mjf6

2026-10-03T17:49:01.301992+00:00

All AC500 V3 products (PM5xxx) with firmware version earlier than 3.8.0 are affected by this vulnerability.

WID-SEC-W-2025-0023 — ABB AC-500: Mehrere Schwachstellen

2026-10-03T17:49:01.302009+00:00

Ein Angreifer kann mehrere Schwachstellen in ABB AC-500 ausnutzen, um Informationen offenzulegen oder seine Rechte zu erweitern.